cleanrows01Who we are
Clean Rows (“Clean Rows”, “we”, “us”) builds custom B2B prospect lists for business customers. We are operated from India and serve customers mainly in the United States, United Kingdom, European Union, Canada and Australia.
For the personal data described in this policy, Clean Rows is the controller: we decide why and how the data is used. You can contact us about anything in this policy at hello@cleanrows.com.
02Who this policy covers
This policy explains how we handle personal data about:
- Website visitors to cleanrows.com and our other Clean Rows pages.
- Customers and enquirers: people who request a free sample, order a list, or contact us by email, WhatsApp or Slack.
- Prospects: business professionals whose work details appear in the lists we build. Section 7 and our GDPR and Your Data Rights page explain this processing in full.
03Data we collect from visitors and customers
Information you give us. When you request a sample or order a list, we collect your name, work email, company, team type, requested volume, timeline, your ideal customer profile (ICP), any notes you add, and anything you send us by email, WhatsApp or Slack.
Order and payment information. Order history, invoices and the payment details needed to confirm a payment. Payments are handled by the bank or provider you choose (bank transfer, PayPal, Wise or Remitly). We do not receive or store full card numbers.
Visit and attribution information. To understand which campaigns bring enquiries, our site stores the following in your browser’s local storage: the campaign tags in the link you arrived from (UTM parameters), ad click identifiers (such as gclid or fbclid), the referring website, the page you landed on, the date, and the last button you pressed on our site. This information is sent to us only if you submit a request. We do not use advertising or cross-site tracking cookies.
Technical information. Our hosting provider records standard server logs (IP address, browser type, pages requested and time) to deliver and secure the site. Our pages load fonts from Google Fonts, which means your browser connects to Google’s servers and shares your IP address with Google.
04How and why we use visitor and customer data
| Purpose | Legal basis (UK and EU GDPR) |
|---|---|
| Replying to your enquiry and preparing your free sample | Steps you asked us to take before a contract |
| Building and delivering your list, support, rebuilds and refunds | Performance of our contract with you |
| Invoicing, tax and accounting records | Legal obligation |
| Understanding which campaigns and pages bring enquiries | Legitimate interests (improving our marketing), or consent where the law requires it |
| Keeping the site secure and preventing abuse | Legitimate interests |
| Occasional updates about our service to existing customers | Legitimate interests; you can opt out at any time |
We do not make automated decisions that have legal or similarly significant effects on you.
06International transfers
We operate from India and our service providers may process data in other countries, including the United States. When personal data from the UK or EU is transferred to a country without an adequacy decision, we rely on safeguards the law allows, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, where they apply.
07Prospect data in our lists
We build prospect lists from publicly available business information: professional profiles (such as LinkedIn), company websites, public business directories and registries, and public regulatory filings. We then check business email addresses with email verification services.
A list row can include: first and last name, job title, employer, company domain, business email, company phone, publicly available mobile number, personal and company LinkedIn profile URLs, company size and industry, and work location (city, state or country). We do not collect special category data (such as health, religion or political views), government ID numbers or financial account details, and we do not build lists of consumers.
We supply this data to business customers for B2B sales research and outreach. Our GDPR and Your Data Rights page gives the full notice for people in our lists, including the legal basis, retention and how to object or be removed. You can ask us to remove you at any time by emailing hello@cleanrows.com.
08How long we keep data
- Enquiries that do not become orders: up to 24 months after our last contact.
- Customer and order records: for as long as you are a customer, then for the period tax and accounting law requires (generally up to 8 years).
- Delivered list files: kept for 90 days after delivery so we can handle rebuilds and support, then deleted from our working storage.
- Attribution data in your browser: stays in your browser until you clear site data.
- Suppression list: if someone asks us not to process their data, we keep the minimum needed (such as their email address) for as long as necessary to make sure they are not added again.
09Security
We protect data with access controls, encrypted connections (HTTPS) and access limited to the people who need it to deliver your order. No method of transmission or storage is completely secure. If a personal data breach is likely to put you at risk, we will tell you and the relevant authorities where the law requires it.
10Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy
- correct inaccurate data
- ask us to delete your data
- restrict or object to our use of your data, including an absolute right to object to direct marketing
- data portability, where processing is based on consent or contract
- withdraw consent at any time, where we rely on consent
- complain to a data protection authority, such as the UK Information Commissioner’s Office or your local EU supervisory authority
To use any right, email hello@cleanrows.com with the subject “Data request”. We may ask you to confirm your identity. We respond within one month, and we do not charge a fee.
11California residents
If you are a California resident, the California Consumer Privacy Act (CCPA) gives you the right to know what personal information we collect and how we use it, to delete it, to correct it, and to opt out of its sale or sharing. We will not treat you differently for using these rights.
For prospect data, we disclose the categories listed in section 7 (identifiers and professional or employment-related information) to our business customers, which may be a “sale” under the CCPA. To opt out of the sale of your information, or to ask for deletion, email hello@cleanrows.com with the subject “Do Not Sell” or “Delete my data”. An authorised agent can make a request for you with your written permission.
For visitors and customers, we do not sell or share your personal information for cross-context behavioural advertising.
12India
Clean Rows is operated from India. We process personal data in line with India’s Digital Personal Data Protection Act, 2023 and its Rules as they come into force. Indian residents can contact us to access, correct or erase their data, or to raise a grievance, using the details below.
13Children
Our service is for businesses. We do not knowingly collect personal data from children, and our lists contain only working professionals.
14Changes to this policy
We will update this page when our practices change and change the “Last updated” date above. If a change materially affects how we use your data, we will tell customers by email before it takes effect.
15Contact
Email hello@cleanrows.com with any question or request about your personal data. A person reads every message.